CISSP - Certified Information Systems Security Professional Training

The CISSP – Certified Information Systems Security Professional certification is a high-level, expert cybersecurity credential — and it does have specific prerequisites before you can become fully certified.

🧩1️⃣ Security and Risk Management (15%) 🧠 Core focus: Governance, compliance, and risk frameworks. Topics Covered: Confidentiality, Integrity, and Availability (CIA Triad) Security governance principles Compliance and legal issues (GDPR, ISO, NIST, etc.) Risk management and assessment processes Security policies, standards, and procedures Professional ethics (ISC² Code of Ethics) Business continuity and disaster recovery Threat modeling and security awareness programs 2️⃣ Asset Security (10%) 💾 Focuses on classifying and handling data and assets securely. Topics Covered: Data classification and ownership Asset management lifecycle Data privacy and protection Information retention and handling requirements Secure data storage, media handling, and disposal 3️⃣ Security Architecture and Engineering (13%) 🏗️ Focuses on designing and implementing secure systems and architectures. Topics Covered: Security models (Bell-LaPadula, Biba, Clark-Wilson) Security architecture principles (layered defense, least privilege) System and enterprise security architecture Cryptography fundamentals (encryption, hashing, PKI) Secure hardware and software design Physical security design Security in cloud and IoT environments 4️⃣ Communication and Network Security (13%) 🌐 Covers network design, security controls, and protocols. Topics Covered: Network architecture and components (LAN, WAN, VPN, SDN) Secure network design (segmentation, defense-in-depth) Network protocols (TCP/IP, DNS, HTTPS, etc.) Firewalls, IDS/IPS, proxies, and load balancers Secure wireless networks and remote access Network attacks and countermeasures VoIP and cloud network security 5️⃣ Identity and Access Management (IAM) (13%) 🔐 Focuses on authentication, authorization, and identity systems. Topics Covered: Access control models (DAC, MAC, RBAC, ABAC) Identity management and provisioning Authentication methods (MFA, biometrics, tokens) Federated identity and single sign-on (SSO) Account lifecycle management Privileged access management (PAM) Identity-as-a-Service (IDaaS) 6️⃣ Security Assessment and Testing (12%) 🧾 Focuses on evaluating and validating security controls. Topics Covered: Security control testing and evaluation Vulnerability assessments and penetration testing Log analysis and security audits Security metrics and reporting Internal and third-party audits Continuous monitoring 7️⃣ Security Operations (13%) ⚙️ Focuses on day-to-day security management and response. Topics Covered: Security operations center (SOC) processes Incident response lifecycle Change and configuration management Digital forensics and evidence handling Patch and vulnerability management Disaster recovery operations Threat intelligence and detection tools (SIEM, SOAR) 8️⃣ Software Development Security (11%) 💻 Focuses on securing applications and software systems. Topics Covered: Secure software development lifecycle (SDLC) Security testing and code reviews Software vulnerabilities (SQL injection, buffer overflow, etc.) DevSecOps principles Secure coding standards and frameworks (OWASP) Software configuration and version control Application security controls

The CISSP-Certified-Information-Systems-Security-Professional exam by (ISC)² is a beginner-friendly, multiple-choice certification exam designed to test your understanding of foundational cybersecurity concepts.

No — the CISSP (Certified Information Systems Security Professional) certification is not directly aligned with Splunk certification exams, but there is some conceptual overlap in areas like security monitoring, incident response, and threat detection.

The CISSP (Certified Information Systems Security Professional) exam by (ISC)² is a 3-hour (180-minute) computer-based test — but the exact length depends on which exam format you take.